William Wernert
c864936c15
Merge pull request #3762 from Security-Onion-Solutions/foxtrot
...
Refactor so-ssh-harden
2021-04-05 12:39:51 -04:00
Doug Burks
8ca0626387
FIX: Hunt query for HTTP EXE downloads should work for both Zeek and Suricata #3753
2021-04-05 06:55:40 -04:00
William Wernert
d19c03efef
Refactor search of config lines
...
* Create arrays for each line and loop through them for better code readability
* Add more host key algorithms for removal
* Update regex to look for a comma or EOL at the end of the search term, to avoid missing last item in list
2021-04-02 14:49:22 -04:00
William Wernert
8b8086b91a
Update wording, as the new key tends to be ED25519, not ECDSA
2021-04-02 10:20:28 -04:00
William Wernert
fd57996bc6
Change behavior of adding lines to sshd config
...
* Replace existing lines in cases where a change has already been made
2021-04-02 10:00:27 -04:00
William Wernert
43c31b4e66
Fix script so changes are actually made
2021-04-01 14:56:05 -04:00
William Wernert
fa373e9db0
Merge branch 'fix/ssh-harden-setup' into foxtrot
2021-04-01 11:04:10 -04:00
Mike Reeves
c60d4aca16
Merge pull request #3724 from Masaya-A/Fix-https
...
Fix: Connection to ES is "https" from 2.3.40
2021-04-01 10:36:02 -04:00
Mike Reeves
234dec3f63
Merge pull request #3734 from Security-Onion-Solutions/zeekports
...
Reserve ports for Zeek
2021-04-01 10:35:16 -04:00
Mike Reeves
7d489ea34f
Merge pull request #3735 from Security-Onion-Solutions/kilo
...
For hunt quick actions, pipe value to 'escape' operator to escape bac…
2021-04-01 10:35:01 -04:00
Mike Reeves
7c6b037ae5
Reserve ports for Zeek
2021-04-01 10:30:52 -04:00
Mike Reeves
40313fc2f5
Reserve ports for Zeek
2021-04-01 10:29:58 -04:00
Mike Reeves
0d05612393
Reserve ports for Zeek
2021-04-01 10:00:55 -04:00
Masaya-A
bc04cae918
Fix: Connection to ES is "https" from 2.3.40
2021-04-01 16:59:47 +09:00
Josh Patterson
6cebc41353
Merge pull request #3720 from Security-Onion-Solutions/issue/3709
...
https://github.com/Security-Onion-Solutions/securityonion/issues/3709
2021-03-31 16:54:15 -04:00
Josh Brower
2b86241450
Merge pull request #3717 from Security-Onion-Solutions/fix/playbook-timestamps
...
Fix Playbook Alert timestamps
2021-03-31 15:47:11 -04:00
Josh Brower
ef98445560
Fix Playbook Alert timestamps
2021-03-31 15:44:41 -04:00
m0duspwnens
f7e99b4961
https://github.com/Security-Onion-Solutions/securityonion/issues/3709
2021-03-31 15:17:15 -04:00
Jason Ertel
820b01405f
For hunt quick actions, pipe value to 'escape' operator to escape backslashes and double quotes
2021-03-31 14:57:36 -04:00
William Wernert
2a595f03b7
Merge pull request #3630 from Security-Onion-Solutions/foxtrot
...
Add option to configure chrony as an ntp service
2021-03-31 13:41:06 -04:00
Josh Brower
209d348108
Merge pull request #3688 from Security-Onion-Solutions/fix/playbook-sync
...
Fix sensor cleanup & playbook sync scripts
2021-03-31 11:59:27 -04:00
Mike Reeves
0d077b0d49
Merge pull request #3704 from gebhard73/patch-2
...
Update so-index-list
2021-03-31 09:18:29 -04:00
William Wernert
04920dcbed
Merge branch 'dev' into foxtrot
2021-03-31 09:15:17 -04:00
Wes Lambert
942de130ca
Enforce date type for ingest.timestamp
2021-03-31 12:24:51 +00:00
gebhard73
0b9cf57b5f
Update so-index-list
...
Sort by index name.
2021-03-31 14:22:06 +02:00
Mike Reeves
e92f5c122c
Merge pull request #3689 from Security-Onion-Solutions/kilo
...
Remove incompatible example
2021-03-30 16:08:16 -04:00
Josh Brower
679925ebd9
Fix sensor cleanup & playbook sync scripts
2021-03-30 13:29:56 -04:00
Wes Lambert
7049383ba6
Add Elastic scripts
2021-03-30 15:47:05 +00:00
Mike Reeves
2534ca7eb7
Merge pull request #3633 from Security-Onion-Solutions/newrepo
...
Attempt to use so repo for network install
2021-03-30 11:37:46 -04:00
Mike Reeves
09064baf71
Update so-common
2021-03-30 11:21:19 -04:00
Mike Reeves
5f5a53b8bb
Push repolist to dev null
2021-03-30 11:14:58 -04:00
Mike Reeves
1a58479f39
Fix acng passthrough
2021-03-29 15:15:34 -04:00
William Wernert
d81d4e7474
Merge branch 'dev' into foxtrot
2021-03-29 09:36:38 -04:00
Jason Ertel
6bce8e8e2c
Remove incompatible example
2021-03-29 07:30:26 -04:00
Mike Reeves
d889bd2694
Fix Security Onio Pub Key
2021-03-28 22:32:03 -04:00
Mike Reeves
5882642c32
fixpath for GPG Keys for real
2021-03-28 22:10:02 -04:00
Mike Reeves
bab062e52b
Fix acng to actually cache
2021-03-26 16:21:03 -04:00
Mike Reeves
955d41abde
Fix acng to actually cache
2021-03-26 16:18:49 -04:00
Mike Reeves
8819cc1371
Fix acng to actually cache
2021-03-26 16:01:22 -04:00
Jason Ertel
0195d366cc
Add custom banner to login page
2021-03-26 14:44:31 -04:00
William Wernert
eb674b3b93
Validate list of ntp servers (ip4, hostname, or fqdn)
2021-03-25 14:45:33 -04:00
Jason Ertel
7fc2467951
Correct local online docs link to release notes
2021-03-24 15:00:02 -04:00
William Wernert
982f2de33c
[fix] Refactor so-ssh-harden
...
* Create a temp file to make changes, and only copy back over if any changes are made
* Test changes as they're made, and exit if the test fails
* Only add lines if they don't already exist in the config
2021-03-24 09:48:00 -04:00
Jason Ertel
79ad87f83c
Remove freqserver, minio, and domainstats from image list
2021-03-23 21:16:17 -04:00
Jason Ertel
887920e7c5
Implement customizable overview page
2021-03-23 16:44:08 -04:00
Jason Ertel
5ade0b9f40
Implement customizable overview page
2021-03-23 16:31:41 -04:00
William Wernert
23cd006724
so-ssh-harden fixes
...
* Change when script is run during setup
* Add newlines to sshd config for legibility
2021-03-23 14:06:10 -04:00
Mike Reeves
e06e023d8e
Fix Dashboard Placeholder
2021-03-20 14:05:55 -04:00
Josh Brower
2425355680
Fix https Playbook Alerter
2021-03-19 16:38:33 -04:00
m0duspwnens
e87fb013dc
prevent salt warning - The 'file_mode' argument will be ignored. Please use 'mode' instead to set file permissions.
2021-03-19 16:21:18 -04:00
